{"total":34,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2110.01823","title":"Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations","created":"2021-10-05","cited_by_count":28,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2206.07953","title":"Analysis and Extensions of Adversarial Training for Video Classification","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2109.05830","title":"Adversarial Bone Length Attack on Action Recognition","created":"2021-09-13","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2203.04713","title":"Defending Black-box Skeleton-based Human Activity Classifiers","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2204.03141","title":"Adversarial Machine Learning Attacks Against Video Anomaly Detection Systems","created":"2022-04-07","cited_by_count":9,"area":null},{"id":"2309.13857","title":"Adversarial Attacks on Video Object Segmentation with Hard Region Discovery","created":"2023-09-25","cited_by_count":9,"area":null},{"id":"2311.10366","title":"Breaking Temporal Consistency: Generating Video Universal Adversarial Perturbations Using Image Models","created":"2023-11-17","cited_by_count":9,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2112.07921","title":"Temporal Shuffling for Defending Deep Action Recognition Models against Adversarial Attacks","created":"2021-12-15","cited_by_count":7,"area":null},{"id":"2312.09935","title":"LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2103.04580","title":"Unsupervised Person Re-Identification with Multi-Label Learning Guided Self-Paced Clustering","created":"2021-03-08","cited_by_count":6,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2207.05729","title":"Physical Passive Patch Adversarial Attacks on Visual Odometry Systems","created":"2022-07-11","cited_by_count":6,"area":null},{"id":"2404.10790","title":"Multimodal Attack Detection for Action Recognition Models","created":"2024-04-13","cited_by_count":5,"area":null},{"id":"2405.16493","title":"Flow Snapshot Neurons in Action: Deep Neural Networks Generalize to Biological Motion Perception","created":"2024-05-26","cited_by_count":5,"area":null},{"id":"2203.10183","title":"RoVISQ: Reduction of Video Service Quality via Adversarial Attacks on Deep Learning-based Video Compression","created":"2022-03-18","cited_by_count":4,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2212.07815","title":"Adversarially Robust Video Perception by Seeing Motion","created":"2022-12-13","cited_by_count":2,"area":null},{"id":"2304.01441","title":"NetFlick: Adversarial Flickering Attacks on Deep Learning Based Video Compression","created":"2023-04-04","cited_by_count":2,"area":null},{"id":"2403.11656","title":"LocalStyleFool: Regional Video Style Transfer Attack Using Segment Anything Model","created":"2024-03-18","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2410.17442","title":"Detecting Adversarial Examples","created":"2024-10-22","cited_by_count":2,"area":null},{"id":"2506.20816","title":"Universal and Efficient Detection of Adversarial Data through Nonuniform Impact on Network Layers","created":"2025-06-25","cited_by_count":2,"area":null},{"id":"2602.11244","title":"Stress Tests REVEAL Fragile Temporal and Visual Grounding in Video-Language Models","created":"2026-02-11","cited_by_count":1,"area":null},{"id":"2607.17069","title":"AdvSerial: Physical Adversarial Attacks on Infrastructure-mounted Pedestrian Detectors via Semantic Feature Suppression","created":"2026-07-19","cited_by_count":1,"area":null},{"id":"2211.13171","title":"Query Efficient Cross-Dataset Transferable Black-Box Attack on Action Recognition","created":"2022-11-23","cited_by_count":0,"area":null},{"id":"2510.18362","title":"FeatureFool: Zero-Query Fooling of Video Models via Feature Map","created":"2025-10-21","cited_by_count":0,"area":null},{"id":"2511.02180","title":"Autobiasing Event Cameras for Flickering Mitigation","created":"2025-11-04","cited_by_count":0,"area":null}],"next_cursor":null}